Mauchel Barthelemy

Thank you Mengqi for this article. I believe this Metasploit extension is a crucial step towards improving IoT security. Pen-testers and companies should take full advantage of this to stay a couple steps ahead of the bad guys.

Why do companies tend to have users change their passwords themselves as an initial step to interact with employees or consumers after a potential security breach? Isn’t such reaction become too predictable for hackers? If so, aren’t they using this in their own advantage? I’m not saying it’s a bad strategy to suggest so; however, I believe a…[Read more]

I was not aware that they allegedly often times sent their employees to work at large tech companies to have them intentionally install back-doors. This is something major if happens to be true and could spark major debates, lawsuits or change the IT Security industry forever.

They are at least trying to do something positive out of this unfortunate situation. It’s hard want to put blames on whoever in a situation like this for a company of Yahoo’s magnitude. Outsiders will never know and understand what really happened besides there was some sort of negligence, and as a result Yahoo got hacked. It’s complicated. It’s…[Read more]

Thanks for bringing this up Scott. A friend of mine is managing a small business website using WordPress. We walked through this and verified the vulnerability, so he quickly updated WordPress to the latest version.

This is the reason it makes perfect sense to place a data center away from see-through windows locations. Hackers will not hesitate to go above and beyond to come up with new ways to steal people’s information every chance they get. IT security professionals and researchers should think the same. Researchers at Ben-Gurion University exemplify g…[Read more]

Very good article Brent. I have not been to Arby’s for a while, so I’m unsure if the restaurant franchise now enables the chip technology in debit/credit cards. If not, this might be a good time for them to start because the chip method is more secure.

Penetration testing must neither be a one-time effort nor should it be occasionally. Pen-testing should be regarded as a long-term business commitment by organizations of all sizes. New forms of vulnerabilities are discovered almost every day. Therefore, one of the best ways to minimize the chances of being hacked are to follow news, keep…[Read more]

Interesting piece of discovery. I will give this a try on a virtual Windows 7 machine in my testing environment. But first, for how long these exploits have been around? Aren’t these vulnerabilities Microsoft should have already addressed by now?

I’m not sure if this is either more of a Google’s Android issue or a developer one. Regardless what is, all parties involved should play their part to resolve this issue. Like I always say, the key here will be to work together. Together is stronger, and in turn stronger is better against hacking. The Android team will need to reinforce the…[Read more]

If I’m not mistaken, I believe the author is referring to the wireless portable USB chargers. The ones you charge at home and carry around to simply plug into your smart device once running out of battery.

Well, this should not be a surprise because most private organizations have not taken cyber security serious until recent years. Therefore, it will take some time before students realize demand is rapidly growing in this field. It won’t be long before cyber security talent’s demand catches up with software programming. In fact, these two will go…[Read more]

Great post Mengqi! I’m going to conduct a research to find out how reliable is this claim. I currently use several devices from which I set voice recognition as one of the authentication methods. Also, I am using a banking service that allows account access via voice recognition. I recently enabled this feature, so I am anxious to verify how…[Read more]

It probably wasn’t a good idea to bring the NES back after all. On a serious note, this is a good example for those who probably believe cyber security has not been around too long ago. On the contrary, older technologies posed securities threats too and were probably as unsecured as newer technologies. The main difference here is that today’s…[Read more]

Loi, I totally agree with you on this one. Backdoor is nothing but a necessary evil the majority of times. Somehow, some way, it will be discovered and most likely by the bad guys. Organizations should stay away from creating backdoor because it auto-destructs.